Cyber Lead - Group Functions Technology

Salary: £40,000 - 75,000 per year

Requirements:

• Significant experience in cybersecurity within a regulated organisation, with credibility to advise senior technology and business stakeholders.
• Strong cyber risk, governance and controls capability, including risk identification and articulation, issue management, control mapping, remediation planning/tracking, and audit/assurance engagement.
• Solid technical foundation across enterprise security domains such as identity and access, threat, exposure and vulnerability management, logging/monitoring, data protection, cloud/SaaS risk and third-party risk, application security and AI.
• Ability to translate technical findings into business impact and clear decision options.
• Strong written and spoken communication in fluent English, with confidence chairing and facilitating governance forums and challenging constructively.
• Collaborative, outcome-driven approach, with the ability to drive delivery through influence in a complex stakeholder environment.
• Desirable: certifications such as ISO27001, CISA, CISM, CISSP, CRISC, CEH or equivalent.
• Desirable: experience supporting technology for Finance, Treasury, Risk domains and/or corporate functions, including sensitivity to financial controls and regulatory reporting.
• Desirable: experience with third-party assurance and SaaS security risk management.
• Desirable: familiarity with operational resilience and technology risk expectations within financial services.

Responsibilities:

• Put the customer at the heart of everything we do in protecting the bank.
• Act as the senior cybersecurity partner for GFT domains (Risk, Finance, Treasury and Corporate Functions), advising leadership and delivery teams on material cyber risks, control expectations and risk-based trade-offs to meet business outcomes.
• Own and drive the cyber risk profile by maintaining the risk register, ensuring risks are clearly articulated, prioritised and managed with accountable owners and timebound remediation plans.
• Lead control governance and assurance readiness by coordinating control assessments, thematic reviews and audit activity, and ensuring high-quality evidence, timely closure of findings and sustainable improvement plans.
• Embed proportionate security-by-design across change delivery by providing risk-based input to solution designs, delivery plans and acceptance criteria.
• Oversee supplier and SaaS cyber risk, including onboarding and renewals, and drive mitigations for access, data protection, logging and monitoring, incident obligations, resilience and exit or lock-in risks.
• Strengthen in-service security posture by influencing technical and control priorities for identity and access risk, threat, exposure and vulnerability management, logging and monitoring coverage, and configuration weaknesses.
• Provide cybersecurity leadership support during incidents and major service events, ensuring appropriate engagement with specialist teams and clear, risk-based decisions and communications.
• Produce concise, decision-grade reporting for senior stakeholders and governance forums, translating technical exposures into business impacts.

Technologies:

• AI
• Cloud
• Support
• Network
• Security
• Embedded

More:

We are HSBC, one of the largest banking and financial services organisations in the world, with a network covering more than 50 countries and territories. This is a senior cybersecurity leadership role within Group Functions Technology, supporting the technology that underpins Risk, Finance and Treasury and a range of corporate functions. You will join a balanced Cyber Lead role combining risk, governance and controls with a strong technical foundation. As an HSBC employee in the UK, you will have access to tailored professional development opportunities and a competitive pay and benefits package, including private healthcare for all UK-based employees, enhanced maternity and adoption pay and support when you return to work, and a contributory pension scheme with a generous employer contribution. We are committed to creating diverse and inclusive workplaces and to removing barriers so careers at HSBC are accessible for everyone to be at their best.

last updated 36 week of 2026